[El-errata] ELSA-2020-3280 Moderate: Oracle Linux 8 nss and nspr security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2020-3280

http://linux.oracle.com/errata/ELSA-2020-3280.html

The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
nspr-4.25.0-2.el8_2.i686.rpm
nspr-4.25.0-2.el8_2.x86_64.rpm
nspr-devel-4.25.0-2.el8_2.i686.rpm
nspr-devel-4.25.0-2.el8_2.x86_64.rpm
nss-3.53.1-11.el8_2.i686.rpm
nss-3.53.1-11.el8_2.x86_64.rpm
nss-devel-3.53.1-11.el8_2.i686.rpm
nss-devel-3.53.1-11.el8_2.x86_64.rpm
nss-softokn-3.53.1-11.el8_2.i686.rpm
nss-softokn-3.53.1-11.el8_2.x86_64.rpm
nss-softokn-devel-3.53.1-11.el8_2.i686.rpm
nss-softokn-devel-3.53.1-11.el8_2.x86_64.rpm
nss-softokn-freebl-3.53.1-11.el8_2.i686.rpm
nss-softokn-freebl-3.53.1-11.el8_2.x86_64.rpm
nss-softokn-freebl-devel-3.53.1-11.el8_2.i686.rpm
nss-softokn-freebl-devel-3.53.1-11.el8_2.x86_64.rpm
nss-sysinit-3.53.1-11.el8_2.x86_64.rpm
nss-tools-3.53.1-11.el8_2.x86_64.rpm
nss-util-3.53.1-11.el8_2.i686.rpm
nss-util-3.53.1-11.el8_2.x86_64.rpm
nss-util-devel-3.53.1-11.el8_2.i686.rpm
nss-util-devel-3.53.1-11.el8_2.x86_64.rpm

aarch64:
nspr-4.25.0-2.el8_2.aarch64.rpm
nspr-devel-4.25.0-2.el8_2.aarch64.rpm
nss-3.53.1-11.el8_2.aarch64.rpm
nss-devel-3.53.1-11.el8_2.aarch64.rpm
nss-softokn-3.53.1-11.el8_2.aarch64.rpm
nss-softokn-devel-3.53.1-11.el8_2.aarch64.rpm
nss-softokn-freebl-3.53.1-11.el8_2.aarch64.rpm
nss-softokn-freebl-devel-3.53.1-11.el8_2.aarch64.rpm
nss-sysinit-3.53.1-11.el8_2.aarch64.rpm
nss-tools-3.53.1-11.el8_2.aarch64.rpm
nss-util-3.53.1-11.el8_2.aarch64.rpm
nss-util-devel-3.53.1-11.el8_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nspr-4.25.0-2.el8_2.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nss-3.53.1-11.el8_2.src.rpm



Description of changes:

nspr
[4.25.0-2]
- Rebuild

[4.25.0-1]
- Update to NSPR 4.25

nss
[3.53.1-11]
- Fix issue with upgradedb where upgradedb expects standard to
generate dbm databases, not sql databases (default in RHEL8)

[3.53.1-10]
- Disable dh timing test because it's unreliable on s390

[3.53.1-9]
- Explicitly enable upgradedb/sharedb test cycles

[3.53.1-8]
- Disable Delegated Credentials for TLS

[3.53.1-7]
- Fix attribute decryption issue where the private key components
integrity check on private attributes where not being checked.

[3.53.1-6]
- Update nss-rsa-pkcs1-sigalgs.patch to the upstream version

[3.53.1-5]
- Include required checks for dh and ecdh key generation in FIPS mode.

[3.53.1-4]
- Add better checks for dh derive operations in FIPS mode.

[3.53.1-3]
- Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
- Adjust for update-crypto-policies packaging change (#1848649)
- Fix compilation with -Werror=strict-prototypes (#1843417)

[3.53.1-2]
- Fix regression in MD5 disablement (#1849938)
- Include rsa_pkcs1_* in signature_algorithms extension (#1847945)

[3.53.1-1]
- Update to NSS 3.53.1

[3.53.0-1]
- Update to NSS 3.53